Simple definition
An Intune disk encryption policy configures supported device encryption controls, including BitLocker settings.
Purpose and use
An Intune disk-encryption policy configures native features such as BitLocker or FileVault on compatible devices.
How does it work?
Profiles define expected options and can integrate recovery-information management according to platform and prerequisites.
Example and verification
Verify actual encryption, active protection and controlled recovery-key availability before considering deployment complete.
Points to watch
An assigned profile does not mean every disk is encrypted. Encryption at rest does not protect every use of data once an authorized session is open.
In short
Validation should cover the actual endpoint and recovery capability, not merely policy status.